As I understand it, the current watermarking methods rely on a secret key, making the detection schemes a black box to anyone not in possession of the key. This means organizations like Anthropic are free to make any claim about authorship they want, true or not, and no one can call them on it.

▲

demibabs 2 hours ago | parent [-]

Part of the legislation requires them to make a public AI text detector (ala GPTZero I assume).

Wouldn’t having that be enough to eventually reverse engineer the key?

	▲	inigyou 2 hours ago \| parent \| next [-]
		Probably not to get the key, but you could certainly use it adversarially to remove the watermark. Removal may come down to changing every third token to a different one.
	▲	dare944 2 hours ago \| parent \| prev [-]
		Not if they designed the algorithm right.